Privacy Policy
Last updated: October 15, 2026
1. Data controller
The controller for the personal data described below is Eraika — see the legal notice for full contact details.
2. Eraika works without a user account
The Site does not offer account creation, and does not collect your name, e-mail address or a password. The data described below is tied to your browser, not to an identity.
3. Cookies and local storage we use
| Name | Purpose | Duration |
|---|---|---|
eraika_wishlist (browser local storage) |
Remembers the gift ideas you save to "My gift ideas". | 13 months |
eraika_search_history (browser local storage) |
Remembers the link to your latest searches made with the generator. | 13 months |
XSRF-TOKEN (cookie) |
Technical security cookie (protection against CSRF attacks). | Session |
eraika_wishlist and eraika_search_history are not cookies in
the strict sense: they use local storage, a browser technology that, like a cookie,
stays specific to your device and browser, but is never sent to our servers.
These cookies and this local storage are strictly necessary for the features you use; they are not used for advertising or to track your browsing on other sites, and therefore do not trigger a consent banner.
4. Data entered in the gift idea generator
When you answer the generator's questions (occasion, recipient profile, budget, interests, free-text notes), this information is:
- sent to our artificial intelligence provider to select the most relevant gift ideas (see section 5);
- stored server-side together with your connection's IP address, so that you can retrieve and share your search results via a dedicated link, and so we can measure how the generator is used.
Please do not enter sensitive or identifying information (name, contact details) in the free-text field: it is not intended to collect such data.
5. Data recipients
- OpenAI (United States) — processes your search content to generate and rank suggestions.
- Supabase Inc. — hosts the Site's database.
- OVH SAS — hosts the application itself.
Your data is never sold or transferred for commercial or advertising purposes.
6. Transfers outside the European Union
Our artificial intelligence provider is located in the United States. This transfer is governed by the European Commission's standard contractual clauses or an equivalent mechanism ensuring an adequate level of data protection.
7. Retention period
Cookies are kept for a maximum of 13 months (see table above).
Search data (generator selections and IP address) is kept to allow extended access to the shared results link.
8. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict and port your data, object to its processing, and withdraw consent where consent is the basis for processing.
As the Site does not create accounts, these rights are mainly exercised by clearing
the eraika_wishlist and eraika_search_history local storage
data from your browser. For any other request (in particular regarding a search
saved with your IP address), contact us via our
contact form.
You may also lodge a complaint with your national data protection authority (in France, the CNIL: www.cnil.fr).
9. Security
We implement reasonable technical and organisational measures (encrypted connections, CSRF attack protection, restricted access to the Site's administration) to protect your data against unauthorised access, loss or disclosure.
10. Changes to this policy
This policy may be updated, in particular to reflect changes to the Site or to applicable regulations. The date of the last update appears at the top of this page.